Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: edqC5Dv6TBrApRbDy3LxsEsOrI0FDuoOgiS1eNlcLMM=
Subject key identifier: 15:AF:71:44:F8:C5:58:77:04:3C:78:CD:0E:1D:01:6A:4E:7C:A5:44
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 019F8FB57CE537D2FCCE5C3D924E15925014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0BD2
Signing time: Thu 23 Jul 2026 16:01:03 +0000
Manifest this update: Thu 23 Jul 2026 16:01:03 +0000
Manifest next update: Fri 24 Jul 2026 16:01:03 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: DPC/giz0S1BG5j6gFwZG3cmZzxtNFQnH+q8ZzNC7+Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7c:e5:37:d2:fc:ce:5c:3d:92:4e:15:92:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Jul 23 16:01:03 2026 GMT
Not After : Jul 24 16:01:03 2026 GMT
Subject: CN=15af7144f8c55877043c78cd0e1d016a4e7ca544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:a4:d9:c4:96:bb:ef:e7:d5:e9:e5:3b:4a:
45:50:02:94:fd:ae:66:8c:fc:19:09:ac:a6:2f:0a:
c3:0d:c2:9a:2e:15:06:be:18:42:7b:9d:86:9e:09:
6e:2b:a8:b6:bc:1d:42:78:c6:44:08:26:93:24:7a:
00:72:2e:db:79:24:42:c5:d2:10:64:a1:24:4c:63:
cf:9b:6f:b9:b5:40:96:9c:6a:f5:4f:dd:71:c8:23:
f8:d6:31:b4:27:2e:a2:30:81:67:4e:45:a7:04:2d:
5d:d4:02:74:39:f5:19:9e:de:58:33:bf:22:ce:37:
d5:2d:25:23:e8:85:2b:30:fd:af:b8:c6:b8:5a:b3:
b5:0c:0d:33:f0:4c:3a:44:93:0f:e8:bf:ad:f5:dc:
62:52:4c:d5:87:69:8e:89:5e:e3:b7:25:a4:14:8f:
02:35:70:06:c6:b8:50:80:58:8e:f3:b5:6a:21:c8:
be:21:08:8a:79:67:b4:ca:d6:7d:9f:26:11:a6:89:
0c:d1:e3:07:54:36:07:2c:45:20:c7:78:da:71:16:
97:56:e1:ee:10:51:a6:ac:6e:7f:a0:a1:06:6b:0a:
bc:80:49:a0:0b:c6:da:37:f4:38:7e:e9:57:0b:7a:
c7:6e:ca:e5:c8:94:aa:1c:00:59:e8:e2:62:48:a0:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:71:44:F8:C5:58:77:04:3C:78:CD:0E:1D:01:6A:4E:7C:A5:44
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:b1:64:ea:9d:b4:05:91:7d:5d:d2:76:4d:90:2f:92:75:
94:4b:3c:54:92:87:71:28:30:81:e2:b7:20:c4:dd:17:d3:e9:
34:db:ea:a8:48:52:50:ae:43:bd:e8:47:dd:86:10:69:80:6d:
89:c3:ba:52:1c:bb:a5:17:e9:40:cd:b9:d7:72:01:7b:48:58:
a7:1c:54:d9:14:7e:51:07:1d:6b:ad:1d:e5:7b:4e:d8:ce:ae:
70:f5:a4:d8:80:97:0b:ab:4e:e9:52:de:3f:2d:a7:d7:a3:11:
c0:d6:1b:cf:6b:a1:2c:0a:eb:07:f4:cb:5a:5d:20:06:11:3a:
2d:40:b9:23:74:39:f5:7f:15:29:92:8d:c7:9a:fe:50:e5:5b:
59:4c:c1:ec:a0:be:0c:83:f6:3e:af:93:3e:83:a2:9f:21:0b:
26:96:30:ea:61:8a:94:d7:b3:3c:18:7a:fd:6f:61:ef:21:11:
42:3e:09:51:35:11:1e:59:45:4e:55:ea:d9:4d:b2:24:e3:1e:
03:cb:30:41:35:23:56:4c:4d:d9:70:aa:48:68:d8:17:8c:b6:
d3:d6:38:f1:c6:b5:f8:3d:0f:3e:05:99:c6:ee:f3:a9:46:96:
90:a3:9a:4a:e1:49:fd:fc:a9:c3:23:49:4e:db:11:ce:30:40:
22:a7:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:35 2026 by rpki-client